{"type":"post","slug":"the-new-mcp-roadmap","title":"The new MCP roadmap","description":"The MCP maintainers published an updated roadmap whose groundwork has already shipped, putting stateless servers, pre-connection discovery and agent identity at the centre of protocol work.","retrieval_nugget":"The MCP maintainers published an updated roadmap whose groundwork has already shipped, putting stateless servers, pre-connection discovery and agent identity at the centre of protocol work.","published_at":"2026-08-30","updated_at":"2026-09-12","record_date":"2026-08-22","date_kind":"published_at","topics":["agent-security","agents","ai","mcp"],"entities":["blog.modelcontextprotocol.io"],"source_url":"https://blog.modelcontextprotocol.io/posts/mcp-roadmap","source_title":"The New MCP Roadmap","source_domain":"blog.modelcontextprotocol.io","source_terms":["roadmap","server","Protocol","areas","specification"],"summary_word_count":187,"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:the-new-mcp-roadmap","status":"published","source_urls":["https://blog.modelcontextprotocol.io/posts/mcp-roadmap"],"visuals":[],"editorial_provenance":{"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:f5f93c61ee8acebc305c29739b92e992673bc2cdc72f3e9e21d3e57739041725","reviewed_at":"2026-09-12T10:00:00Z","source_evidence_count":1,"verified_claim_count":2,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":2,"implication_count":1,"watch_condition_count":1,"related_record_count":3},"analysis":{"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"The Model Context Protocol maintainers published an updated roadmap on 22 August, and most of its groundwork has already shipped rather than being merely promised.","observed_facts":[{"text":"The 2026-07-28 specification release removed protocol-level sessions and the initialization handshake so a server can scale horizontally without holding state.","source_urls":["https://blog.modelcontextprotocol.io/posts/mcp-roadmap"]},{"text":"The roadmap names agent identity and enterprise-ready security among the next priority areas, alongside HTTP-native transport unification.","source_urls":["https://blog.modelcontextprotocol.io/posts/mcp-roadmap"]}],"mechanism":"The 2026-07-28 specification release removed protocol-level sessions and the initialization handshake, so a server can scale horizontally without holding state, and clients can now call server/discover to read supported versions and capabilities before committing to a connection.","why_now":"Governance hardened in the same cycle. The project adopted a Contributor Ladder, Working Groups now triage proposals in their own areas, and the specification gained a feature lifecycle and deprecation policy that the July deprecations were the first to follow.","implications":["A protocol carrying production traffic needs a predictable way to remove things, not only to add them."],"evidence_boundary":"The roadmap states direction, not shipped behaviour, for everything past the July release.","watch_conditions":["The signal to watch is whether agent identity lands as a protocol primitive in the next specification or stays a vendor-side concern, because that choice decides who is able to authorize an agent's access."],"related_records":[{"url":"https://newruntime.com/posts/cloudflare-turns-mcp-traffic-into-a-network-control-surface","relation":"Prior coverage of the enforcement layer forming around MCP traffic."},{"url":"https://newruntime.com/posts/cloudflare-mcp-detection-enforcement","relation":"Prior coverage of edge detection and enforcement for MCP calls."},{"url":"https://newruntime.com/topics/mcp","relation":"Topic hub tracking how the MCP control surface develops."}]},"routes":{"html":"https://newruntime.com/posts/the-new-mcp-roadmap/","markdown":"https://newruntime.com/posts/the-new-mcp-roadmap.md","json":"https://newruntime.com/posts/the-new-mcp-roadmap.json"}}